[Samba] user login passwords are mixed up

[Rowland penny]

On 04/02/16 20:02, oeh univie edv lists wrote:
> Hello,
>
> Some users in my domain report that they have to use different (old)
> passwords on different computers. They say that they still have to use
> their "old" passwords after they changed it. My domain setup is that users
> are asked to automatically change their password on Windows 7 Enterprise
> after some months. So they have to do that. Otherwise they cannot login.
> But why is it, that the old password is still requested on some computers?
> Can this happen, when users do not turn off Windows 7 computers (are still
> logged in on the PC where they changed the passwort) and switch to other
> computers?
>
> I looked in all relevant logs in /var/log, auth.log and in all logs in
> directory samba. I cannot even find ANY information for user
> authentication. Where to look? Which log is relevant? How to rise the log
> level?
>
> I run a Samba Active Directory DC 4.1.17 on Debian Jessie.
>
> I attached some logs to the mail how /var/log looks ... hardly any looging
> except for startups and shutdowns of samba. I restartet samba and attached
> the logs. How to monitor this problem?
>
> Any help why this happens is much appreciated.
>
> KR, birgit
>
>
>
>
> /var/log/samba
> 20:50:33 # ls -la
> insgesamt 76
> drwxr-x--- 3 root adm   4096 Feb  3 06:25 .
> drwxr-xr-x 9 root root  4096 Feb  4 06:25 ..
> drwx------ 4 root root  4096 Okt  4 19:59 cores
> -rw-r--r-- 1 root root     0 Okt  4 19:59 log.
> -rw-r--r-- 1 root root     0 Okt 11 06:25 log.nmbd
> -rw-r--r-- 1 root root   373 Okt  4 22:36 log.nmbd.1.gz
> -rw-r--r-- 1 root root 47049 Feb  4 20:49 log.samba
> -rw-r--r-- 1 root root   829 Feb  4 20:50 log.smbd
> -rw-r--r-- 1 root root   394 Feb  2 17:46 log.smbd.1
>
>
> more log.smbd
> [2016/02/04 20:49:56,  0] ../source3/smbd/server.c:1189(main)
>    smbd version 4.1.17-Debian started.
>    Copyright Andrew Tridgell and the Samba Team 1992-2013
> [2016/02/04 20:49:56.632305,  0]
> ../lib/util/become_daemon.c:136(daemon_ready)
>    STATUS=daemon 'smbd' finished starting up and ready to serve
> connectionsUnable to connect to CUPS server localhost:631 - Ungültiger
> Dateideskriptor
>    STATUS=daemon 'smbd' finished starting up and ready to serve
> connectionsfailed to retrieve printer list: NT_STATUS_UNSUCCESSFUL
> [2016/02/04 20:50:56.705359,  0]
> ../source3/printing/print_cups.c:151(cups_connect)
>    Unable to connect to CUPS server localhost:631 - Ungültiger
> Dateideskriptor
> [2016/02/04 20:50:56.705745,  0]
> ../source3/printing/print_cups.c:528(cups_async_callback)
>    failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL
>
> more samba.log
> [2016/02/04 20:49:55.974285,  0]
> ../source4/smbd/server.c:370(binary_smbd_main)
>    samba version 4.1.17-Debian started.
>    Copyright Andrew Tridgell and the Samba Team 1992-2013
> [2016/02/04 20:49:56.170079,  0]
> ../source4/smbd/server.c:488(binary_smbd_main)
>    samba: using 'standard' process model
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> [2016/02/04 20:49:56.217188,  0]
> ../lib/util/become_daemon.c:136(daemon_ready)
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
>
>
>
>

If a password is changed but the old password still works on *some* 
windows machines, then this is very probably not a Samba problem, it 
could in fact be a windows 'feature', see here:

https://support.microsoft.com/en-us/kb/906305

Rowland